Commit d07e692f3c5a132c785adde08dd1d58412b3ac97
1 parent
0284e8ff
Exists in
master
and in
2 other branches
Set _remote_user to HTTP Only
Showing
1 changed file
with
1 additions
and
1 deletions
Show diff stats
lib/omniauth/strategies/remote_user.rb
| @@ -48,7 +48,7 @@ module OmniAuth | @@ -48,7 +48,7 @@ module OmniAuth | ||
| 48 | request = Rack::Request.new(env) | 48 | request = Rack::Request.new(env) |
| 49 | response = redirect_if_not_logging_in(request,_auth_path(request) ) | 49 | response = redirect_if_not_logging_in(request,_auth_path(request) ) |
| 50 | if response | 50 | if response |
| 51 | - response.set_cookie(options.internal_cookie, {value: uid , path: "#{request.script_name}"}) | 51 | + response.set_cookie(options.internal_cookie, {value: uid, path: "#{request.script_name}", httponly: true}) |
| 52 | response.finish | 52 | response.finish |
| 53 | end | 53 | end |
| 54 | end | 54 | end |